Transcription

2 INTRODUCTION The following slides will help you set up your computer and Microsoft Outlook to send and receive DIGITALLY SIGNED and ENCRYPTED in compliance with current instructions. You may contact the Helpdesk at any time for assistance at

3 REQUIRED ITEMS In order for personnel to be able to send and receive encrypted and digitally signed , there are certain required items for workstation setup and then Outlook configuration: 1. Common Access Card (CAC) and PIN. Your CAC must be in the card reader and PIN # used when you send this type of . Your CAC contains certificates, a way of verifying your identity. The methods used to perform this is called Public Key Infrastructure or PKI.

4 REQUIRED ITEMS 2. Computer Workstation. Setup and configuration of Outlook will only be valid for the workstation on which you set it up. If you travel to another, you have to set it up again. 3. Current Card Reader. The current CAC Reader is ActivClient 6.1 x86. You must also see the card reader icon on the task bar in the lower right corner of your computer screen. When you insert your card, the icon should change as noted below: ActivClient Agent - No Smart Card ActivClient Agent Smart Card Inserted

5 REQUIRED ITEMS 4. Microsoft Outlook 2007 You must have a fully functioning Microsoft Outlook 2007 office application installed on your computer. **ITEMS 1-4 MUST BE IN PLACE BEFORE PROCEEDING** FOR PROBLEMS, CONTACT THE IMD HELPDESK AT OR

6 SETUP 1. Log on computer with User Name/Password or CAC/PIN. Insert CAC into Card reader if not already installed NOTE: Make sure that the icon in the tray changes to reflect the card insertion:

8 SETUP (cont.) 3. Making Your Certificates Available To Windows (you need to do this to install your Certificates on your workstation): Step 1: Double click on ActivClient Agent icon in system tray area of desktop. Step 2: Pull down the TOOLS menu and select ADVANCED-MAKE CERTIFICATES AVAILABLE TO WINDOWS. Click OK after you are successful. NOTE: If the icon indicates that it is ActiveGold versus ActivClient, then you have the OLD version of the CAC Reader installed and you need to contact the IMD Helpdesk at

9 SETUP (cont.) Before exiting the program, double click on My Certificates, then on the Signature certificate, OK, Encryption certificate, OK to verify your address. Close ActivClient screen If your address is INCORRECT, exit out of the window and update it via one of the methods below before proceeding (ensure your certificates are still valid, i.e. not revoked or expired): 1. Update it yourself at the following link: https://www.dmdc.osd.mil/appj/ump/umphome.do 2. Go to any of the CAC PIN reset stations. Go to the following link to find the CAC reset station nearest you: https://intranet.mar.med.navy.mil/mid/faq/cac-operators.doc

10 OUTLOOK CONFIGURATION Next we will configure Microsoft Outlook 2007 so that can be Digitally Signed and Encrypted Click TOOLS-MACRO-SECURITY Click SECURITY in TRUST CENTER

11 OUTLOOK CONFIGURATION Select the SEND CLEAR TEXT option only so that your will always be sent as clear text until you choose to Encrypt or Digitally Sign. Next select the SETTINGS tab

12 1. Make sure Active Client Certificates is in the Security Settings Name and that all of the boxes are checked. OUTLOOK CONFIGURATION Change Security Settings 2. Click on the 1 st Choose button. Click on the DOD Smart Card certificate and OK. This certificate may be listed 1 st or 2 nd for you, so look closely. 3. Click on the 2 nd Choose button. Click on the remaining certificate (if there are 2 remaining, pick the one that mentions encryption ) and OK, and then click OK again.

13 OUTLOOK CONFIGURATION Publish to the Global Access List (GAL) 1. Click on Publish to GAL button on left. Message will appear stating you are about to publish your certificates to the Global Address list. Click OK. Enter CAC pin number when asked. Once you receive the message that your certificates have been published successfully, click on OK, and then click on OK.

14 SENDING A DIGITALLY SIGNED MESSAGE To prepare to send a digitally signed message, make sure that you have Microsoft Outlook 2007 open and New Message selected. 1. Click on NEW MESSAGE You should see two new Envelope icons on the MESSAGE tab above the OPTIONS group on the Ribbon. 2. To digitally sign a message, click on the envelope with the red digitally sign symbol on it before sending. You will have to insert your CAC and enter your PIN.

15 SENDING AN ENCRYPTED MESSAGE 1. To encrypt a message, you need to click on the envelope with the blue padlock on it before sending the message. 2. When encrypting, you must also digitally sign, so both envelope icons must be selected. 3. You will be required to insert your CAC and type in your PIN before the message can be sent.

16 Department of Defense (DoD) Global Directory Service If you cannot send encrypted (usually happens if the individual has a Department of Defense address outside of the Global Directory), you will need to go to a place called the Department of Defense (DoD) Global Directory Service to retrieve their Public Key Certificate. This is an example of the error message that you might see in Microsoft Outlook 2007 if you are unsuccessful in sending an encrypted message to another user:

17 Department of Defense (DoD) Global Directory Service To get to this DoD-wide repository in order to search for and retrieve a certificate, go to https://dod411.chamb.disa.mil (CAC is required). The website will look like the picture below: Type in the last name (at a minimum) of the individual whose certificates you want to retrieve and click SEARCH.

18 Department of Defense (DoD) Global Directory Service After clicking on the SEARCH button, one or more users will appear in a window like the one below. Click on the last name of the desired user to expand the certificate: Under Certificate Download Options, click Download Certificates) as vcard

19 Department of Defense (DoD) Global Directory Service Once the next window appears below, click on Hardware (CAC) Certificate for under Select a certificate from the available certificates for vcard download. This window will pop up right after you click Hardware (CAC) Certificate for the user that you have selected. Click on OPEN (NOTE: YOU MUST HAVE MICROSOFT OUTLOOK 2007 OPEN FOR THIS TO WORK!).

20 Department of Defense (DoD) Global Directory Service After clicking OPEN, the user s Contact information will automatically open in Microsoft Outlook and you can click on the Certificates tab to view the certificate. SAVE AND CLOSE the Contact. If the individual is already in your Contacts List, you will receive a Duplicate Contact Detected message and be prompted to Update new information... if you desire.

How to use Certificate in Microsoft Outlook Macau Post esigntrust Version. 2006-01.01p Agenda Configure Microsoft Outlook for using esigntrust Certificate Use certificate to sign e-mail Use Microsoft Outlook

Use of Common Access Cards (CACs) from Home on Windows 7 without Middleware Problem: Microsoft Windows 7 includes a native capability to read and use the newest CACbased PKI certificates without installing

How to Publish Your Smart Card Certificates Using Outlook 2010 To send or receive (and read) digitally signed or encrypted email messages with colleagues at NIH, you must first publish your PIV certificate

Online Backup by Mozy Restore Common Questions Document Revision Date: June 29, 2012 Online Backup by Mozy Common Questions 1 How do I restore my data? There are five ways of restoring your data: 1) Performing

AKO Email Shutdown Quick Reference Guide NETWORK ENTERPRISE CENTER This guide explains how the Army is shutting down AKO Email and outlines steps you must take to ensure a smooth transition to full DoD

Installing your Digital Certificate & Using on MS Out Look 2007. Note: This technical paper is only to guide you the steps to follow on how to configure and use digital signatures. Therefore Certificate

Using TLS encryption with OS X Mail This guide assumes that you have already created an account in Mail. If you have not, you can use the new account wizard. The new account wizard is in the Accounts window

Importing your personal certificate(s) to Microsoft Internet Explorer from a Back-up (or export) file You may use your Medium Assurance Certificate(s) on any computer that you wish to by importing them

Those that use Macintosh computers to access Noetix cannot directly access Noetix through http://www.sandiego.edu/noetix. If one is on a Mac and goes to Noetix directly in a web browser, the page is likely

Using TLS Encryption with Microsoft Entourage This guide assumes that you have previously configured Entourage to work with your Beloit College email account. If you have not, you can create an account

Outlook Express and Express Archiver to Backup and Retrieve E-Mail at UW 1 Express Archiver can be used to read archived e-mail that has been organized by Outlook Express (OE). If properly set in Outlook

How to Setup Your MS Outlook Account to Digitally Sign and Encrypt Emails Please follow the steps listed below Note Please make sure that the Outlook profile created has an IMAP connection and NOT a Google

How-To Change your Account Settings in Office Outlook 2010: This document will how you step-by-step how to change your account settings in Microsoft Office Outlook 2010. This how-to only covers this version

Outlook Express Open up Outlook Express From the Menu Bar Tools to Accounts - Click on Mail Tab Click on mail.btconline.net mail (default) Click on Properties button Click on the General tab User Information

Outlook Express Open up Outlook Express From the Menu Bar Tools to Accounts - Click on Mail Tab Click on mail.nefcom.net (default) Click on Properties button Click on the General tab User Information E-mail

Using TLS encryption with OS X Mail This guide assumes that you have already created an account in Mail. If you have not, you can use the new account wizard. The new account wizard is in the Accounts window

Citi Secure Email Program Receiving Secure Email from Citi For External Customers and Business Partners Protecting the privacy and security of client information is a top priority at Citi. Citi s Secure

Adding Digital Signature and Encryption in Outlook Using Outlook, the email messages can be signed and encrypted by a digital certificate. To digitally sign a message in Outlook some conditions must be

Email messages stored on the County mail server are purged every 14 days. If your job requires that you save email, local folders can be created within Outlook. Messages can then be copied or moved from

Setting up CatMail on Outlook 2010 Before beginning this process, make sure that IMAP is enabled in your account and that you have your CatMail Secondary password. For more information on CatMail Secondary

Setting up Email in Outlook Express If you have more than one email account but need to use a single computer to access them, then Outlook Express can help. To begin, open Outlook Express by double-clicking

Frequently Asked Questions Naval VAMOSC Public Key Infrastructure/ Common Access Card (PKI/CAC) Registration and Log in Please Note: A PKI-enabled browser is required for certificate registration and to

This document will walk you through the process of migrating your existing mail, contacts, and calendar from WOU s Webmail system to the WOU Gmail system. If you are not interested in migrating your mail,

IT Handbook The IT team has provided some resources for you to help you in your job. Please use these tools to help our department help you with any issues that you may be having with your computer. Some

Email Signing and Encryption using Microsoft outlook 2007 Prerequisite a. The user s email account has been added and correctly configured into Microsoft outlook. b. The user has an authentication certificate.

How To Configure CU*BASE Encryption Configuring encryption on an existing CU*BASE installation INTRODUCTION This booklet was created to assist CU*Answers clients with the configuration of encrypted CU*BASE

Email Signing and Encryption using Microsoft outlook 2010 Prerequisite a. The user s email account has been added and correctly configured into Microsoft outlook. b. The user has an authentication certificate.

ElkhartNet, Inc. is dedicated to providing our email customers with excellent service and support. In a targeted effort to reduce SPAM and to provide more secure and faster email, we are changing our outgoing

507-214-1000 This information is provided for informational purposes only. The following guide will show you how to set up email in various email programs. The Basic Email settings for all email addresses

Joint Knowledge Online CAC Login Troubleshooting Guide Updated Thursday, September 13, 2012 Overview Some users experience problems accessing JKO using CAC. This problem is often the result of a well known

Using Take Back Your Life! with Outlook 2010 A user guide to technical settings INTRODUCTION One of the great benefits of the methodologies behind our popular book and group seminar, Take Back Your Life!

Jumble for Microsoft Outlook Jumble is a zero knowledge, end- to- end email encryption solution that integrates with existing email platforms. Jumble integrates at the email client level and removes the

Instructions: Configuring Outlook 2003 with Exchange 2010 on the FIUMail Environment Some users have been using Outlook 2003 with their IMAP or POP account, and already have a profile set up. For those

Configuring Microsoft Outlook for First Time Use with POP3 email provided by Blue Tangerine Solutions Step 1 Open Outlook if this is your first time using Outlook, then you will be launched into the Startup

Thomas G. Broxholm Setting Up Outlook Mail Accounts Outlook Open the Windows Control Panel and double click on the Mail icon. Note! For 64 bit Windows users. The mail icon could be found inside a folder

Adding Outlook to a Blackberry, Downloading, Installing and Configuring Blackberry Desktop Manager The following instructions work for the District provided Blackberrys from Sprint, but I think it should

Using TLS Encryption with Microsoft Outlook 2007 This guide is meant to be used with Microsoft Outlook 2007. While the instructions are similar, the menu layouts and options have changed since the previous

How to set up Outlook Anywhere on your home system The Outlook Anywhere feature for Microsoft Exchange Server 2007 allows Microsoft Office Outlook 2007 and Outlook 2003 users to connect to their Outlook

Password Change FAQ Q. I use a MAC How do I change my password so I can send and receive my email? A. First point a browser to http://www.redlands.edu/passwordmanager and change your password. Afterward,

About Digital Signature using MyKey Purpose MyKey is the digital signature software governed by Malaysia s Digital Signature Act 1997 & is accepted by the courts of law in Malaysia. A document digitally

How To Set up Email in Outlook 2016 These instructions are intended specifically for setting up an email account in Microsoft Outlook 2016. Step #1: Add or Edit the Email Account A. To set up a new email

Contents Page Q. How do I access my email? Q. How do I change or reset a password for an email account? Q. How do I forward or redirect my messages to a different email address? Q. How do I set up an auto-reply

E-mail Encryption SecurenCrypt e-mail encryption was designed to work as a plug-in with Microsoft Outlook. The following instructions are geared toward users encrypting e-mail with Outlook. However, throughout